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Name and Address of Entity or Person that owns or licenses Hie data sub|ect to the breach 


OFFICE OF ATTORNEY GENERAL 
Consumer Protection Division 
Government Center South, 5 lh floor 
302 W. Washington Street 
Indianapolis, IN 46204 
(317) 233-4393-Fax 


The Law Office of Jon P. Yormick Co. LPA 

Street Address 

850 Euclid Avenue, Suite 1102 


Submitted by 

Craig Hoffman 


Finn Name (if different than entity ) 
Baker Hostetler 


Email 

cahoffman@bakerlaw.com 


1 city 

State 

Cleveland 

Ohio 


Title 

Partner 


Zip Code 
44114 


Dated 

7/31(15 


Telephone 

5139293491 


Relationship to Entity whose Information was compromised 

Outside Counsel 


Type of Organlzalion (p/ease select one) 


1 1 State of Indiana Government Agency 

PI Health Care 

□ Not-For-Profit 

1 ] Other Government Entity 

1 1 Flnanciai Services 

PI Other - please specify 

HD Educational 

0 Other Commercial 



Number of Persons Affected 


Total (Indiana Include 


appx. 40 


1 


Date Breach Occurred (include start/end dates if known) 6/13/2015 


Date Breach Discovered 6/15/2015 


Date Consumers Notified 7/31/15 



Reason for delay, if any, in sending notification 


Notification is being provided without unreasonable delay pursuant to the investigation described below, which was necessary "to 
determine the nature and scope of the incident and to identify the individuals affected. See Ind. Code Ann. §24-4.9-1-1. 


| Description of Breach (select all that apply ) 



□ 

Inadvertent disclosure 

CD 

External system breach (e.g. hacking) 

□ 

Insider wrong-doing 

□ 

Other 

0 

Loss or theft of device or media (e.g. computer, laptop, external 
hard drive, thumb drive, CD, tape) 




| Information Acquired (select all that apply ) 

17[ Social Security Number 

1 1 Name in combination with ( select all that apply) 

□ Driver’s License Number □ State Identification Number □ State identification Number 

□ Debit Card Number (in combination with security code, access code, password or PIN for account) 


List dates of previous breach notifications (within last 12 months) 
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Manner of Notification to Affected Persons 


Attach a copy of a samp/e notification letter 

[71 Written 

□ Electronic (email) 

I I Telephone 


Identity Theft Protection Service Offered 


□ Yes 

Duration 

H No 

Provider 



Brief Descripfion of Service: 


Since this breach, we have taken (he following steps to ensure it does not reoccur (affac/i additional pages if necessary) 


To help prevent something like this from happening in the future, the Law Office is strengthening its physical office and computer 
security and enhancing its practices and procedures regarding the safeguarding of firm property and confidential information. 


Any other information lhat my be relevant to the Office of Attorney General in reviewing this incident (attach additional pages if necessary) 


Our client, the Law Offices of Jon P. Yormick Co. LPA ("Law Office’’), takes the privacy and safety of personal information very 
seriously. Regrettably, during the evening hours on June 13, 2015, two desktop computers and a hard drive were stolen from the 
Law Office. Upon discovering the theft on June 15, 2015, the Law Office immediately notified the Cleveland Police Department. The 
Law Office is working with law enforcement, but to date, the two stolen desktop computers and hard drive have not been recovered. 
The Law Office also promptly began an internal review determine what specific information was contained on the two desktop 
computers and the hard drive. This took time as the Law Office had to first obtain backup data from an outside vendor. The Law 
Office determined that the two desktop computers and hard drive may have contained certain individuals' names, addresses, Social 
Security numbers and, in some instances, health records. The Law Office has no reason to believe that the two desktop computers 
and hard drive were stolen for the information they contained or that your information has been accessed or used in any way. The 
Law Office is recommending that affected individuals remain vigilant by reviewing their account statements and credit reports for 
unauthorized activity. The Law office is providing a telephone number that affected individuals can contact with questions. 













